情報セキュリティマネジメントシステムや品質マネジメントシステムなどの標準化を行っている国際標準化機構はどれか。
平成30年度 春期 ITパスポート試験 問32
This question's explanation and your answers so far.
問 32
Incorrectア
ANSI stands for the American National Standards Institute and is the national standards body of the United States. It handles standardization at the national level, not a worldwide international standardization organization, so it is incorrect.
Incorrectイ
CEN is the European Committee for Standardization, a regional standards body covering the European region. It is not an international standardization organization covering the whole world, so it is incorrect.
- ウ
正解 ISO stands for the International Organization for Standardization. It is an organization whose members are the national standards bodies of countries around the world, and it sets international standards across a wide range of fields. The information security management system (ISMS) mentioned in the question is the ISO/IEC 27000 series, and the quality management system (QMS) is the ISO 9000 series, both of which are established by ISO. Therefore, the one that matches the international standardization organization is ISO, option ウ.
Incorrectエ
JIS stands for Japanese Industrial Standards and is a national standard within Japan. Although it sometimes adopts international standards such as ISO for use in Japan, it is itself Japan's national standard, not an international standardization organization, so it is incorrect.
- ISO (the International Organization for Standardization) is an international organization whose members are the standards bodies of various countries; ISMS is standardized as the ISO/IEC 27000 series and QMS as the ISO 9000 series.
- The key point is to distinguish the differences in scope among national standards (JIS = Japan, ANSI = USA), regional standards (CEN = Europe), and international standards (ISO).